[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fg0uzZYRkX_UAESmPIYn1cvcJdtEzht7f3GQVsokQ2aw":3},{"article":4,"iocs":47,"watch_terms":48,"solutions":49,"lesson":131},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"00c6e7c0-f578-4505-921c-9574c62c985f","Is your $40 doorbell camera a security asset or a shadow network node?\n\nIn this @labscon_io 2025...","is-your-40-doorbell-camera-a-security-asset-or-a-shadow-network-node-in-this-lab-083c64","Is your $40 doorbell camera a security asset or a shadow network node?\n\nIn this @labscon_io 2025 video, @marcwrogers and @silascutler pull back the curtain on a \"bulletproof\" shadow supply chain that games FCC certification and puts deeply insecure devices on home networks at https:\u002F\u002Ft.co\u002Fj3iNpUXRMe","At LabsCon 2025, security researchers Marc Rogers and Silas Cutler revealed a supply chain scheme that circumvents FCC certification processes to distribute deeply insecure doorbell cameras to consumers. The presentation highlights how manufacturers game regulatory oversight, resulting in $40 devices with significant security flaws being deployed on home networks, effectively creating uncontrolled shadow network nodes.","Researchers expose shadow supply chain bypassing FCC certification for insecure doorbell cameras.","https:\u002F\u002Fx.com\u002FSentinelOne\u002Fstatus\u002F2047087521784647943","https:\u002F\u002Fpbs.twimg.com\u002Famplify_video_thumb\u002F2047086514874777600\u002Fimg\u002FQOOh-iKCr0ujbc4j.jpg","2026-04-22T22:57:52+00:00","2026-04-22T23:00:15.096763+00:00",7,[17,20,23],{"name":18,"type":19},"Unnamed shadow supply chain operators","threat_actor",{"name":21,"type":22},"Budget doorbell cameras ($40 price point)","product",{"name":24,"type":25},"FCC certification process","technology","d6f63bb8-0801-486a-be7f-171400700454",{"id":26,"icon":28,"name":29,"slug":30},null,"IoT\u002FOT","iot-ot",[32,37,42],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":38},{"id":39,"icon":28,"name":40,"slug":41},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":43},{"id":44,"icon":28,"name":45,"slug":46},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",[],[21],{"controls":50,"vendors":130},[51,80,101],{"slug":52,"name":53,"problem":54,"products":55},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[56,64,72],{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":81,"name":82,"problem":83,"products":84},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[85,93],{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":102,"name":103,"problem":104,"products":105},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[106,114,122],{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",[],{"slug":132,"title":133,"body":134,"framework_refs":135,"framework_notes":141},"insecure-iot-devices-create-shadow-network-vulnerabilities","Insecure IoT Devices Create Shadow Network Vulnerabilities","Security researchers exposed how manufacturers exploit regulatory loopholes to distribute $40 doorbell cameras with serious security flaws that bypass FCC certification. These devices become uncontrolled shadow network nodes on home networks, creating entry points for attackers. The incident demonstrates how weak supply chain security and inadequate device vetting can turn convenience products into cybersecurity liabilities. Organizations and consumers must recognize that cheap IoT devices often sacrifice security for cost, potentially compromising entire network infrastructures.",[136,137,138,139,140],"CIS Control 1","CIS Control 12","NIST SP 800-53 SA-4","NIST Cybersecurity Framework PR.DS-6","ENISA IoT Security Guidelines",{}]